TYPO3 Core

Here are some tracking params we're not excluding in excludedParameters.

HubSpot Email Tracking Parameters
_hsenc
_hsmi

HubSpot CTA Tracking Parameters

__hssc
__hstc
__hsfp
hsCtaTracking

HubSpot Form Tracking Parameters
submissionGuid

HubSpot Ad Tracking Parameters (Google / Facebook / LinkedIn)
hsa_acc
hsa_ad
hsa_cam
hsa_grp
hsa_kw
hsa_mt
hsa_net
hsa_src
hsa_tgt
hsa_ver
hsa_ol
hsa_la

Additional GA4 UTM Parameters
utm_id
utm_source_platform
utm_creative_format
utm_marketing_tactic

GTM
gtm_debug

Google Ads
dclid

Adobe Advertising IDs Used by Analytics
s_kwcid
ef_id

At last, we should include the google related ones.
It is cumbersome right now, that if marketing wants to use new tool (crm/newsletter...) they have to check with developers whether params are causing 404 or not. And deploy code changes to make it run.

some sources:
https://matomo.org/faq/tracking-campaigns-url-builder/
https://matomo.org/faq/how-to/faq_120/
https://matomo.org/faq/reports/advanced-how-to-manually-build-campaign-tracking-urls/

https://support.google.com/analytics/answer/10917952
https://support.google.com/analytics/answer/11242870